CVE-2014-0117CVE-2014-0117

Affected configuration(s):

cpe:/a:apache:http_server:2.4.6
cpe:/a:apache:http_server:2.4.7
cpe:/a:apache:http_server:2.4.8
cpe:/a:apache:http_server:2.4.9
cpe:/o:apple:mac_os_x:10.10.2

Date published: 2014-07-20T07:12:48.823-04:00

Date last modified: 2016-07-08T13:24:47.030-04:00

CVSS Score: 4.3

Principal attack vector: NETWORK

Complexity:  MEDIUM

Reference URL: http://advisories.mageia.org/MGASA-2014-0305.html

Summary: The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.

CategoriesUncategorised

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.